Hello,
has anyone a good idea for me? I have 15895 sm$ Files in my
imail\spool\proc directory. 28.12 till now.
all (marked as) Spam, all similar Logfile entries.
???
Alex
________________________________
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag
von Hirthe, Alexander
Gesendet: Mittwoch, 20. Dezember 2006 08:46
An: [email protected]
Betreff: AW: [Declude.Virus] Couldn't rename SMD to SM$ [183]
Hello John,
the error is both in the declude and in the viruslog:
declude.log:
12/19/2006 07:40:18.453 q893502340000819c.smd Tests failed
[weight=515]: IPNOTINMX=IGNORE[0] CBL=WARN[60] MXRATE-BLOCK=IGNORE[80]
SORBS-DUHL=IGNORE[60] UCEPROTECT-1=IGNORE[80] UCEPROTECT-2=IGNORE[70]
CMDSPACE=IGNORE[80] SUBCHARS-50=IGNORE[10] SUBCHARS-55=IGNORE[10]
SUBCHARS-60=IGNORE[10] SNIFFER-GREYMAIL=WARN[90] FOREIGN=IGNORE[15]
TLD-TRUSTED-HELO=IGNORE[0] TLD-TRUSTED-MAILFROM=IGNORE[0]
TLD-TRUSTED-REVDNS=IGNORE[0] Y!DIRECTED=IGNORE[50]
ANTI-Y!DIRECTED=IGNORE[-40] WEIGHT50=WARN[50] WEIGHT80=SUBJECT[80]
WEIGHT100=SUBJECT[100] WEIGHT150=SUBJECT[150] WEIGHT200=ATTACH[200]
WEIGHT250=DELETE[250] WEIGHT300=IGNORE[300] WEIGHT350=IGNORE[350]
12/19/2006 07:40:18.453 q893502340000819c.smd Couldn't move/copy
ATTACH data file [183]
12/19/2006 07:40:18.453 q893502340000819c.smd Action(s) taken
for [EMAIL PROTECTED] = IGNORE WARN SUBJECT ATTACH DELETE [LAST
ACTION=DELETE]
12/19/2006 07:40:18.453 q893502340000819c.smd Cumulative
action(s) on this email = IGNORE WARN SUBJECT ATTACH DELETE [LAST
ACTION=DELETE]
12/19/2006 07:45:18.469 q893502340000819c.smd Couldn't rename
SMD to SM$ [183]. Priority back to 32. Error String: [Cannot create a
file when that file already exists.]
[C:\IMAIL\spool\proc\work\D893502340000819c.smd]
[C:\IMAIL\spool\proc\work\D893502340000819c.sm$]
virus.log:
12/19/2006 07:45:18.469 q893502340000819c.smd Couldn't rename
SMD to SM$ [183]. Priority back to 32. Error String: [Cannot create a
file when that file already exists.]
[C:\IMAIL\spool\proc\work\D893502340000819c.smd]
[C:\IMAIL\spool\proc\work\D893502340000819c.sm$]
Why does declude try to Attach the (Spam-Mail) file, if it
should delete it?
And where does the file come from?
Alex
________________________________
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im
Auftrag von John T (Lists)
Gesendet: Dienstag, 19. Dezember 2006 00:45
An: [email protected]
Betreff: RE: [Declude.Virus] Couldn't rename SMD to SM$
[183]
Search for all log lines for that message in both the
junkmail and virus logs to see if there is another error message
preceding that.
John T
eServices For You
"Life is a succession of lessons which must be lived to
be understood."
Ralph Waldo Emerson (1802-1882)
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Hirthe, Alexander
Sent: Monday, December 18, 2006 2:54 PM
To: [email protected]
Subject: [Declude.Virus] Couldn't rename SMD to SM$
[183]
Hello,
what should this message tell me? :)
---------------------
12/18/2006 23:51:47.687 q1a180199000003bb.smd Couldn't
rename SMD to SM$ [183]. Priority back to 32. Error String: [Cannot
create a file when that file already exists.]
[C:\IMail\spool\proc\work\D1a180199000003bb.smd]
[C:\IMail\spool\proc\work\D1a180199000003bb.sm$]
---------------------
and why does it happen?
I found it multiple times in the logfile, running
declude v4.3.14 with AVG Built-In and ClamAV.
Alex
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to
[EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be
found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to
[EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be
found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
